added basic auth filter